Lucene search
+L

1469 matches found

RedHat Linux
RedHat Linux
added 2025/05/13 2:13 p.m.38 views

avahi: Avahi Wide-Area DNS Predictable Transaction IDs

A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs...

5.3CVSS5.7AI score0.00681EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/05/13 2:13 p.m.17 views

Moderate: Red Hat Security Advisory: avahi security update

An update for avahi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

5.3CVSS6.7AI score0.00681EPSS
SaveExploits0References2
OSV
OSV
added 2025/05/13 12:0 a.m.10 views

ALSA-2025:7437 Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.5AI score0.00681EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2025/05/13 12:0 a.m.11 views

Moderate: avahi security update

Avahi is an implementation of the DNS Service Discovery and Multicast DNS specifications for Zero Configuration Networking. It facilitates service discovery on a local network. Avahi and Avahi-aware applications allow you to plug your computer into a network and, with no configuration, view other...

5.3CVSS6.7AI score0.00681EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/12 2:34 p.m.3 views

SUSE-SU-2025:20308-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS bsc1233420 - Drop rcFOO symlinks jscPED-266...

5.3CVSS7.1AI score0.00681EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/05/12 2:33 p.m.2 views

Security update for avahi

This update for avahi fixes the following issues: CVE-2024-52616: Fixed predictable transaction IDs for Wide-Area DNS bsc1233420 Drop rcFOO symlinks jscPED-266. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

6.3CVSS7.3AI score0.00681EPSS
SaveExploits0References6
Rockylinux
Rockylinux
added 2025/05/07 7:11 p.m.6 views

avahi bug fix update

An update is available for avahi. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Avahi is an implementation of the DNS Service Discovery and Multicast DNS...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.9 views

Do Not Install the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

6.7AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.4 views

Do Not Enable the Avahi Service

Avahi is a zero-configuration networking implementation, including a system for multicast DNS/DNS-SD service discovery and automatic broadcast. For example, you can connect a server to the network and use Avahi to automatically broadcast network services running on the server for other user to...

6.7AI score
SaveExploits0References1
Rosalinux
Rosalinux
added 2025/04/11 10:8 p.m.10 views

Advisory ROSA-SA-2025-2832

Software: avahi 0.7 OS: ROSA Virtualization 2.1 packageevrstring: avahi-0.7-21.0.1.rv3 CVE-ID: CVE-2023-1981 BDU-ID: 2023-03858 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Avahi Local Area Network Service Discovery System involves uncontrolled resource consumption. Exploitation of the...

6.2CVSS7AI score0.00453EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.9 views

The vulnerability of the avahi_alternative_host_name() function in the Avahi service discovery system allows a attacker to cause a service failure.

The vulnerability of the avahialternativehostname function in the Avahi service discovery system in local networks is related to the lack of use of the assert function. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.2CVSS6.4AI score0.00319EPSS
SaveExploits0References13Affected Software6
OSV
OSV
added 2025/04/03 10:22 a.m.16 views

CLSA-2025-1743675732 avahi: Fix of 8 CVEs

CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject...

6.2CVSS6.6AI score0.00453EPSS
SaveExploits2References1
Rockylinux
Rockylinux
added 2025/03/17 8:16 p.m.6 views

avahi bug fix and enhancement update

An update is available for avahi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.5...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-52615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are...

5.3CVSS6.8AI score0.00574EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-6519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote...

9.1CVSS7AI score0.03082EPSS
SaveExploits1References2
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.362 views

GHSA-5QM6-J92F-79JP vulnerabilities

Vulnerabilities for packages: avahi...

7.5AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.10 views

GHSA-43RM-FV4G-CMJ8 vulnerabilities

Vulnerabilities for packages: avahi...

7.5AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.17 views

GHSA-4G3H-V9FP-PGM4 vulnerabilities

Vulnerabilities for packages: avahi...

7.5AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.24 views

GHSA-H3X3-J454-4PHV vulnerabilities

Vulnerabilities for packages: avahi...

7.5AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.13 views

GHSA-MG8V-G9MC-P4F8 vulnerabilities

Vulnerabilities for packages: avahi...

7.5AI score
SaveExploits0
Rows per page
Query Builder